Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/34352e3233302e3130302e302f32322d3234203d3e20323637313738.roa
File:                     34352e3233302e3130302e302f32322d3234203d3e20323637313738.roa (raw, json)
Hash identifier:          Nfinog8YYaPYdqVBGI26fAd1O+gfzjYONXAaXlDh0sA=
Subject key identifier:   BE:BB:FE:38:B4:24:E3:FF:15:4F:EE:AB:C4:92:FF:6E:70:12:FE:48
Certificate issuer:       /CN=ECABE999366C3D759F07776633849CF7F486B8D3
Certificate serial:       2BB8CEB3F8F2F857D9F05EEDF44272F0C8406E14
Authority key identifier: EC:AB:E9:99:36:6C:3D:75:9F:07:77:66:33:84:9C:F7:F4:86:B8:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECABE999366C3D759F07776633849CF7F486B8D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/34352e3233302e3130302e302f32322d3234203d3e20323637313738.roa
Signing time:             Wed 13 Aug 2025 13:06:29 +0000
ROA not before:           Wed 13 Aug 2025 13:01:29 +0000
ROA not after:            Wed 12 Aug 2026 13:06:29 +0000
asID:                     267178
IP address blocks:        45.230.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/ECABE999366C3D759F07776633849CF7F486B8D3.crl
                          rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/ECABE999366C3D759F07776633849CF7F486B8D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECABE999366C3D759F07776633849CF7F486B8D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 07:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b8:ce:b3:f8:f2:f8:57:d9:f0:5e:ed:f4:42:72:f0:c8:40:6e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECABE999366C3D759F07776633849CF7F486B8D3
        Validity
            Not Before: Aug 13 13:01:29 2025 GMT
            Not After : Aug 12 13:06:29 2026 GMT
        Subject: CN=BEBBFE38B424E3FF154FEEABC492FF6E7012FE48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:07:10:52:50:48:84:7b:d0:84:b9:05:4a:
                    f2:9e:4f:8a:a3:bf:33:63:d6:f2:07:db:cb:be:08:
                    12:80:fd:f7:a3:cf:41:90:75:e4:54:c3:cc:97:1e:
                    e6:71:1e:c4:d4:7d:af:47:7d:57:05:b3:60:16:46:
                    29:e8:26:ef:29:3f:c5:37:02:db:93:76:12:d2:59:
                    47:4a:c5:34:95:73:1f:e7:6d:3e:fd:a6:35:df:44:
                    11:35:fe:33:5c:a5:4e:68:08:6a:20:58:f7:b4:14:
                    0e:27:a4:40:b4:0c:7a:33:11:39:3a:42:bd:c1:af:
                    49:aa:18:9f:6a:b4:8b:7a:f9:8a:3b:26:36:72:eb:
                    54:c9:d7:3f:15:87:66:33:29:14:a9:3f:9a:43:b1:
                    f2:29:5b:c3:ec:7b:e4:32:90:12:1a:04:f6:41:54:
                    58:a7:b1:9d:68:a2:d7:d7:e5:2d:02:d9:9c:eb:a2:
                    67:01:76:dd:c3:76:57:2f:53:fa:30:a9:0c:6c:aa:
                    f5:2f:e7:08:ca:6c:b5:9c:f3:ba:de:c5:7d:48:66:
                    8f:11:f5:1e:72:3f:4f:a2:93:29:73:2a:7c:b2:39:
                    32:a6:17:2a:9f:f7:9d:80:8e:b3:32:e9:9e:b6:29:
                    4f:fb:56:36:98:80:0a:9f:6d:4d:d0:29:e7:e3:81:
                    1b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BB:FE:38:B4:24:E3:FF:15:4F:EE:AB:C4:92:FF:6E:70:12:FE:48
            X509v3 Authority Key Identifier:
                keyid:EC:AB:E9:99:36:6C:3D:75:9F:07:77:66:33:84:9C:F7:F4:86:B8:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/ECABE999366C3D759F07776633849CF7F486B8D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECABE999366C3D759F07776633849CF7F486B8D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/34352e3233302e3130302e302f32322d3234203d3e20323637313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:f2:7d:b9:fe:fc:ec:7f:ed:be:f1:05:ea:05:24:f8:e4:ff:
         b4:33:a0:8f:a5:55:4c:a7:29:77:3e:49:7c:e4:7c:26:e8:7d:
         ea:f5:28:e9:77:8e:0a:b6:4b:6e:72:df:6b:77:b3:28:6c:53:
         c4:15:d1:33:1f:2c:fb:d6:94:b1:4f:9f:2a:b3:91:a6:59:5d:
         29:8e:42:fb:e3:33:ce:c5:9d:e1:b2:d1:6a:7c:0d:46:17:e3:
         6b:ba:da:a8:65:8a:48:9c:30:2b:3b:63:d5:8c:2a:34:1b:c0:
         2c:94:dc:d2:84:98:ff:45:a9:c8:e9:6a:0c:66:47:bd:c1:29:
         49:6d:40:b2:5f:b8:b9:48:9f:d3:1f:5c:d0:90:f0:09:93:81:
         c8:f5:2c:5e:47:47:9d:3c:58:80:1e:e1:29:b0:b7:9a:54:6b:
         05:2a:14:c2:80:1e:68:51:a4:fe:12:48:d9:dc:d8:b8:03:af:
         37:b0:fb:56:40:a0:5a:b4:4d:db:9b:17:37:4e:08:e2:21:ad:
         b6:6f:dd:e5:6a:64:4d:7f:01:5b:e3:c2:9d:3d:3f:5c:e9:c8:
         ad:6d:41:31:b3:5a:c2:f9:52:00:c4:8a:72:8e:e8:7a:f5:df:
         50:12:00:f9:a6:e2:93:9b:58:fb:87:76:4a:98:6c:d5:dd:63:
         a9:c8:1d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:38:36 2025 by rpki-client